Day 20 - Social Engineering Tactics

Social engineering is one of the most dangerous cyberattack methods because it targets people instead of systems.

Attackers manipulate human psychology using fear, urgency, trust, curiosity, or rewards to trick victims into revealing sensitive information.

Common Social Engineering Tactics

• Phishing: Fake emails or login pages
• Vishing: Voice calls pretending to be trusted entities
• Smishing: Fraudulent SMS messages
• Pretexting: Fake identities requesting sensitive data
• Baiting: Free USB drives, files, or fake offers used as traps

How to Stay Safe

• Verify urgent requests before acting
• Never share OTPs, passwords, or PINs
• Inspect links carefully before clicking
• Confirm caller identity independently
• Be cautious with “too good to be true” offers

Cybersecurity starts with awareness.
The strongest defense against social engineering is to pause, verify, and think critically.

Stay aware. Stay secure.
ASRBD